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Claims 

What is claimed is: 

11. A method for processing network accounting information, comprising: 

2 (a) receiving accounting information over a packet-switched network; 

3 (b) monitoring at least one aspect of the received accounting information; and 

4 (c) discarding at least a portion of the accounting information based on the 

5 monitored aspect. 

1 2. The method as recited in claim 1 , wherein the accounting information is 

2 discarded for providing a defense against network attacks. 

1 3 . The method as recited in claim 1 , wherein the accounting information is 

2 discarded for dealing with heavy network traffic. 

1 4. The method as recited in claim 3, and further comprising generating a 

2 summary of the accounting information. 

1 5 . The method as recited in claim 1 , wherein monitoring the at least one aspect 

2 of the received accounting information includes detecting a scan of a 

3 plurality of ports. 

1 6. The method as recited in claim 1 , wherein monitoring the at least one aspect 

2 of the received accounting information includes detecting a scan of a 

3 plurality of Internet Protocol (IP) addresses. 

1 7. The method as recited in claim 1 , wherein monitoring the at least one aspect 

2 of the received accounting information includes monitoring a rate of receipt 

3 of the accounting information. 
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1 8. The method as recited in claim 7, wherein monitoring the at least one aspect 

2 of the received accounting information includes detecting whether the rate of 

3 receipt of the accounting information exceeds a predetermined amount. 

1 9. The method as recited in claim 1 ? wherein monitoring the at least one aspect 

2 of the received accounting information includes monitoring a load on a 

3 system receiving the accounting information. 

1 10. The method as recited in claim 1 , wherein the network includes the Internet. 

1 11. A computer program product for processing network accounting information, 

2 comprising: 

3 (a) computer code for receiving accounting information over a packet-switched 

4 network; 

5 (b) computer code for monitoring at least one aspect of the received accounting 

6 information; and 

7 (c) computer code for discarding at least a portion of the accounting information 

8 based on the monitored aspect. 

1 12. The computer program product as recited in claim 1 1 , wherein the 

2 accounting information is discarded for providing a defense against network 

3 attacks. 

1 13. The computer program product as recited in claim 1 1 , wherein the 

2 accounting information is discarded for dealing with heavy network traffic. 

1 14. The computer program product as recited in claim 1 3, and further comprising 

2 computer code for generating a summary of the accounting information. 
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1 15. The computer program product as recited in claim 1 1 , wherein the computer 

2 code for monitoring the at least one aspect of the received accounting 

3 information includes computer code for detecting a scan of a plurality of 

4 Internet Protocol (IP) addresses. 

1 16. The computer program product as recited in claim 1 1 , wherein the computer 

2 code for monitoring the at least one aspect of the received accounting 

3 information includes computer code for monitoring a rate of receipt of the 

4 accounting information. 

1 17. The computer program product as recited in claim 1 6, wherein the computer 

2 code for monitoring the at least one aspect of the received accounting 

3 information includes computer code for detecting whether the rate of receipt 

4 of the accounting information exceeds a predetermined amount. 

1 18. The computer program product as recited in claim 1 1 , wherein the computer 

2 code for monitoring the at least one aspect of the received accounting 

3 information includes computer code for detecting a scan of a plurality of 

4 ports. 

1 19. The computer program product as recited in claim 1 1 , wherein the computer 

2 code for monitoring the at least one aspect of the received accounting 

3 information includes computer code for monitoring a load on a system 

4 receiving the accounting information. 

1 20. A system for processing network accounting information, comprising: 

2 (a) logic for receiving accounting information over a packet-switched network; 

3 (b) logic for monitoring at least one aspect of the received accounting 

4 information; and 
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5 


(c) 


logic for discarding at least a portion of the accounting information based on 




6 




the monitored aspect. 




1 


21. 


A method for processing network accounting information, comprising: 




2 


(a) 


receiving accounting information over a packet-switched network; 




3 


(b) 


monitoring at least one aspect of the received accounting information; and 




4 


(c) 


conditionally preventing an overload of the accounting information based on 




5 




the monitored aspect. 
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22. 


A method for processing network accounting information, comprising: 




2 


(a) 


receiving accounting information over a packet-switched network; 




3 


(b) 


receiving an indication relating to at least one aspect of the received 




4 




accounting information; and 


. j^i 
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(c) 


conditionally preventing an overload of the accounting information based on 


fit 


6 




the indication. 
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23. 


A method for processing network accounting information, comprising: 




2 


(a) 


receiving accounting information over a packet-switched network; 




3 


(b) 


detecting a scan of a plurality of ports; 




4 


(c) 


detecting a scan of a plurality of Internet Protocol (IP) addresses; 




5 


(d) 


detecting a rate of receipt of the accounting information; 
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predetermined amount; 




8 


(f) 


detecting a load on a system receiving the accounting information; 




9 


(g) 


conditionally preventing an overload of the accounting information based on 
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aspects detected during steps (b)-(f); and 
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(h) 


generating a summary of the accounting information. 
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